InfoSec GRC Manager — Risk & Compliance Leader

Signet Jewelers; Ohio; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive healthcare, dental, and視

Paid time off and holidays

Employee discounts on merchandise

401(k) matching

Learning & Development programs

And more

Job summary

Signet Jewelers in Akron, OH is seeking an experienced Information Security GRC Manager to lead governance, risk, and compliance initiatives across the enterprise. You will align security policies with regulatory requirements and business goals, partnering with IT, Legal, Privacy, and business teams to embed security into operations.

The role requires a 10+ year track record in information security or IT risk, with strong knowledge of NIST, ISO 27001, COBIT, and proficient in coordinating

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Business, or related field.
• 10+ years of experience in information security, IT risk, or compliance, with 2–3+ years in a GRC-focused role.
• Strong knowledge of industry frameworks and standards (e.g. NIST, ISO 27001, COBIT).
• Proven experience managing assessments and working with external regulators and assessors.
• Demonstrated ability to manage multiple concurrent initiatives and remediation efforts.

Responsibilities

• Plan and execute compliance readiness, and certification assessments (e.g., SOX, PCI-DSS, NIST CSF, ISO 27001)
• Serve as the primary point of contact for external assessors and auditors
• Ensure ongoing compliance with applicable regulatory and contractual requirements
• Coordinate internal and external audits, including SOX-related security controls where applicable
• Lead enterprise risk assessments, including identification, analysis, prioritization, and mitigation of security risks
• Define and monitor Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs)
• Drive risk-based decision-making across security and business stakeholders
• Track remediation activities, ensuring timely closure and proper documentation
• Drive continuous improvement of control effectiveness and assurance processes
• Partner with IT, Legal, Privacy, and business teams to embed security and compliance into operations
• Provide regular reporting on risk posture, compliance status, and program maturity to senior leadership
• Maintain and evolve security policies, standards, procedures, and risk methodologies
• Develop, maintain, and continuously enhance the enterprise information security governance framework
• Develop and deliver security awareness programs related to risk and compliance
• Promote a strong culture of security and accountability across the organization

Skills

Audit management

Risk assessment

Regulatory compliance

Cross-functional collaboration

Leadership

Communication

Education

Bachelor’s degree in Information Security or related field

Tools

Optro/AuditBoard

ServiceNow GRC

OneTrust

Job description

Signet Jewelers in Akron, OH is seeking an experienced Information Security GRC Manager to lead governance, risk, and compliance initiatives across the enterprise. You will align security policies with regulatory requirements and business goals, partnering with IT, Legal, Privacy, and business teams to embed security into operations.

The role requires a 10+ year track record in information security or IT risk, with strong knowledge of NIST, ISO 27001, COBIT, and proficient in coordinating